External Parties Security Audit Checklist
External Parties Security Audit Checklist
Clause 6.2 ISO 27001
1. Identification of risks related to external parties
• Whether risks to the organization’s information and information processing facility, from a process involving external party access, is identified and appropriate control measures implemented before granting access.
2. Addressing security while dealing with customers
• Whether all identified security requirements are fulfilled before granting customer access to the organization’s information or assets.
3. Addressing security in third party agreements
• Whether the agreement with third parties, involving accessing, processing, communicating or managing the organization’s information or information processing facility, or introducing products or services to information processing facility, complies with all appropriate security requirements.
Related documents
Advertisement
Sponsor sites:
1. Phrases For Performance Appraisals.
2. Interview questions and answers.
This entry was posted
on Tuesday, November 24th, 2009 at 3:16 pm and is filed under ISO 27001 checklist.
You can leave a response, or trackback from your own site.
